Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/1C9261D234DB11EDA39F0DBBF1222468.roa
File: 1C9261D234DB11EDA39F0DBBF1222468.roa (raw, json)
Hash identifier: NLb01xB7X840+MgJjD2awghg9QtePsquP/6QREYfhV0=
Subject key identifier: FF:19:20:C9:B7:6F:A8:B5:B0:14:CA:F8:85:61:D3:74:1F:FB:81:DD
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 024E
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/1C9261D234DB11EDA39F0DBBF1222468.roa
Signing time: Thu 15 Sep 2022 09:45:20 +0000
ROA not before: Thu 15 Sep 2022 09:45:17 +0000
ROA not after: Wed 20 Sep 2023 09:45:17 +0000
asID: 7018
IP address blocks: 102.177.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 15 09:45:17 2022 GMT
Not After : Sep 20 09:45:17 2023 GMT
Subject: CN=6322f430-15aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:c8:29:2c:c0:a8:16:39:69:b3:28:dd:3f:
63:a8:b8:2a:f6:bc:cd:b5:f8:61:67:bb:07:c8:49:
41:ca:f4:75:41:6d:9f:6d:cf:90:ae:3f:43:fc:fe:
bb:70:f1:c9:68:d3:66:b6:7a:c8:69:c9:c1:46:c8:
67:c5:b1:27:24:78:e9:d5:1e:16:36:17:bf:03:f1:
e7:b2:61:a9:df:bb:a2:db:29:0d:91:3e:db:d8:aa:
ac:f6:98:c9:b0:1b:eb:f9:fe:4b:d2:66:89:88:7c:
8f:43:9e:b2:8f:a3:ea:a5:27:d4:fc:af:da:2e:e2:
7a:e2:75:8a:aa:27:61:d4:2f:e2:11:28:ae:eb:ae:
20:c9:4c:34:9f:b1:fa:06:61:8a:b4:f1:f2:ef:1b:
00:1e:d9:92:8a:89:bf:70:f7:33:c3:2e:d4:88:16:
02:9f:ff:b5:e2:7d:a7:2a:9a:f8:27:98:3d:f3:29:
2e:55:b9:e2:a1:b4:aa:72:20:d1:9f:29:73:94:2b:
4c:eb:5f:ce:41:91:43:69:e3:87:f2:8f:10:6a:81:
97:75:d2:92:18:24:2d:7b:0e:81:d5:8b:23:d3:5c:
ca:62:c9:b1:30:0d:f7:48:46:43:e2:61:28:8c:fa:
f4:d8:38:3b:4c:45:8f:f2:d7:e3:ee:b4:e2:86:7b:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:20:C9:B7:6F:A8:B5:B0:14:CA:F8:85:61:D3:74:1F:FB:81:DD
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/1C9261D234DB11EDA39F0DBBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/21
Signature Algorithm: sha256WithRSAEncryption
58:8b:6e:5b:b4:65:48:69:bc:53:53:b1:a6:ba:a8:bc:06:1b:
2b:e2:c2:22:7b:dc:f3:a7:ae:ef:ae:e3:e2:e4:73:5e:32:52:
5a:44:65:4d:2b:c8:f4:8d:37:55:31:de:e2:8d:de:59:9f:ab:
25:17:3a:16:4e:50:63:f7:c6:56:4d:e2:3f:34:a9:5f:9b:93:
99:f7:12:37:f1:30:a0:72:a3:5e:4d:6e:24:b3:bf:97:58:16:
98:fd:dc:da:2a:ef:b3:96:4f:45:4e:17:2c:72:68:9b:89:1a:
b7:24:f4:86:bd:dd:49:e9:a3:1b:2d:6e:67:0d:5f:0a:8d:3f:
3e:e4:3c:b6:03:bb:13:36:c0:57:c2:63:3e:65:1f:5d:ce:2c:
37:8f:b7:a4:ca:82:4d:b0:ff:0f:a3:6b:fb:7d:44:19:dc:a1:
e0:79:99:d0:87:93:b4:6e:07:b3:61:65:8f:ab:d6:8b:f4:0f:
0e:12:b0:9c:64:14:8f:04:38:fe:7f:23:a7:74:4e:04:59:1a:
14:79:e4:5d:08:67:fd:95:9e:bb:a7:23:43:e7:6d:0e:e9:07:
39:eb:34:44:8d:d6:3a:e2:9b:8f:b3:09:c8:89:66:5a:12:ca:
48:1f:ca:49:70:94:5b:c5:53:46:ee:11:94:65:9a:53:b7:ac:
ea:78:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org